Ransomware Group intelligence
Orova
ActiveTrack Orova with 48 published victims and 3 known leak locations in a single intelligence view.
Overview
Orova is tracked by Breach House as a ransomware group with 48 published victims.
United States is currently the most targeted country in this dataset.
3 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (3)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | mzlajyncb2rafn5bsb7esmo73kyawjxeirunba27n6nermmafzlcp4qd.onion |
| Leak location 2 | Onion service | Unknown | mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onion |
| Leak location 3 | Onion service | Unknown | ns7y6bxawualjj5rpo5num6syejd7hgaowrndk3r4duxu2iyinzv6hid.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (48)
Search, filter and paginate the victim timeline for Orova. Showing 1–48 of 48.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | ADG Healthcare id31224 View details | Egypt | Healthcare / Pharma | ||
|
ADG Healthcare is a healthcare and pharmaceutical company based in Egypt, providing various medical services and products. The company operates in the healthcare sector, catering to the needs of patients and healthcare professionals. ADG Healthcare was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | ADG Healthcare id31224 View details | Egypt | Healthcare / Pharma | ||
|
ADG Healthcare is a company that operates in the Medical Specialists industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Cairo, Cairo, Egypt. |
|||||
| Ransomware | eSysTech id31225 View details | Brazil | IT | ||
|
Esys Tech is a Brazilian company operating in the IT sector, providing various technology services. Located in Brazil, the company offers solutions to its clients in the country. Esys Tech is listed as a ransomware victim associated with Orova |
|||||
| Ransomware | eSysTech id31225 View details | Brazil | IT | ||
|
The company offers customized software solutions and develops new modules and platforms to enhance IT asset management. Its main product, ADOTI, provides comprehensive tools for tracking and managing IT resources, serving clients across various sectors, including Votorantim Cimentos and Unimed. eSysTech has established partnerships with multiple companies to deliver its services effectively. |
|||||
| Ransomware | Northeastern Communications & Electrical id31226 View details | United States | Construction / Real Estate | ||
|
Northeastcne.com operates in the construction and real estate sector in the United States, providing services to clients in the region. The company's offerings likely include construction management, real estate development, and related services. Northeastcne.com was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | Northeastern Communications & Electrical id31226 View details | United States | Construction / Real Estate | ||
|
Northeastern Communications & Electrical LLC, based in Middletown, Connecticut, specializes in the installation of voice, data, and video systems for various building types, including small, medium, and large-scale projects. The company prides itself on delivering high-quality and professional services, backed by years of technical expertise. |
|||||
| Ransomware | Apollo Office System id31227 View details | Japan | IT | ||
|
Apollo Net is a Japanese company operating in the IT sector, providing various services and solutions. The company is based in Japan and caters to the local market with its offerings. Apollo Net was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | Apollo Office System id31227 View details | Japan | IT | ||
|
Since our establishment in May 1970 as an office equipment sales company, we have provided one-stop services to propose office rationalization and a more comfortable office environment. |
|||||
| Ransomware | EMPYREAN INT’L TECHNO DEVICES id31228 View details | Taiwan, Province of China | IT | ||
|
Empyrean TW operates in the IT sector in Taiwan, providing various services. The company's specific offerings are not well-documented. Empyrean TW was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | EMPYREAN INT’L TECHNO DEVICES id31228 View details | Taiwan, Province of China | IT | ||
|
Taiwan-based telecom and electronics accessories company. They specialize in wearable accessories, such as digital watches and related gear. |
|||||
| Ransomware | Texas Medical Screening id31229 View details | United States | Healthcare / Medicine | ||
|
Texas Medical is a healthcare organization based in the United States, providing medical services to patients. The entity operates in the healthcare sector, offering various medical services. Texas Medical was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | Texas Medical Screening id31229 View details | United States | Healthcare / Medicine | ||
|
Texas Medical has helped organizations deliver health screenings without the overhead. Our self-service kiosks are trusted in workplaces, pharmacies, and community spaces across the country. |
|||||
| Ransomware | Sc Regional Housing Authority id31230 View details | United States | NGOs / Associations | ||
|
The South Carolina Hospital Association, or Scrha, is a US-based organization serving the state's hospital and healthcare system, providing various resources and support to its members. As a non-profit association, Scrha aims to promote and improve healthcare services in South Carolina. Scrha net was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | Sc Regional Housing Authority id31230 View details | United States | NGOs / Associations | ||
|
SCRHA3 provides affordable housing solutions across South Carolina, focusing on public housing, homeownership, and rental assistance programs. With over 15 years of experience, they offer subsidized housing assistance to qualified families and help low-income families access the private rental market through the Section 8 program. |
|||||
| Ransomware | Bjs Insurance & Financial id31231 View details | United States | Finance / Legal / Insurance | ||
|
Bjsinsurance.net operates in the finance and insurance sector, providing services in the United States. The company offers various insurance-related products and services to its clients. Bjsinsurance.net was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | Bjs Insurance & Financial id31231 View details | United States | Finance / Legal / Insurance | ||
|
BJS Insurance Services, Inc. was established upon two underlying principles that continue to define the company today.... Integrity and Stability. We're all about Service, we just do what we say we're going to do. We listen to our clients and suggest what plans fit your needs and budget. |
|||||
| Ransomware | Wisdom Oral Surgery id31232 View details | United States | Healthcare / Medicine | ||
|
Wisdom Oral Surgery is an oral surgery practice based in the US, providing various medical services to patients. As a healthcare provider, it operates within the medicine sector, offering specialized care. Wisdom Oral Surgery was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | Wisdom Oral Surgery id31232 View details | United States | Healthcare / Medicine | ||
|
Wisdom Oral Surgery, located in Fair Lawn, NJ, specializes in a wide range of oral surgery services including dental implants, wisdom teeth extractions, bone grafting, and facial trauma care. The clinic is dedicated to providing exceptional patient comfort and care, utilizing advanced technology for accurate diagnoses and treatments. |
|||||
| Ransomware | SURE TRAVEL COMPANY id31233 View details | Hong Kong | Transportation / Travel / Logistics | ||
|
Sure Travel Company Limited is a Hong Kong-based company operating in the transportation and travel sector. The company provides various travel-related services. Sure Travel Company Limited was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | SURE TRAVEL COMPANY id31233 View details | Hong Kong | Transportation / Travel / Logistics | ||
|
SURE TRAVEL COMPANY LIMITED was incorporated on 24-JAN-2000 as a Private company limited by shares registered in Hong Kong. |
|||||
| Ransomware | SBI Manufacturing id31208 View details | United States | Manufacturing / Engineering | ||
|
Sbimfg.com is a US-based company operating in the manufacturing and engineering sector, providing various products and services to its customers. The company is involved in the design, development, and production of engineered products. Sbimfg.com was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | SBI Manufacturing id31208 View details | United States | Manufacturing / Engineering | ||
|
SBI Manufacturing is a family-owned company based in Sioux Falls, SD, specializing in metal fabrication and machine welding. They provide services primarily to the agricultural, industrial, and transportation sectors. |
|||||
| Ransomware | Agricultural Chemical Solutions id31209 View details | United States | Agriculture / Food | ||
|
Agchemicalsolutions.com is an entity operating in the agriculture and food sector in the United States, providing various solutions related to agricultural chemicals. The company's offerings likely cater to the needs of farmers, agricultural businesses, and related organizations. Agchemicalsolutions.com was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | Agricultural Chemical Solutions id31209 View details | United States | Agriculture / Food | ||
|
Agricultural Chemical Solutions, Inc. provides high-quality agricultural chemicals and a comprehensive marketplace aimed at enhancing farming operations. They offer a wide range of products including pesticides, herbicides, fungicides, and micro nutrients, with competitive pricing and expert recommendations. |
|||||
| Ransomware | DBM Reflex id31210 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
dbmreflex.com.tw is a company based in Taiwan, operating in the manufacturing and engineering sector. The company likely provides various products or services related to its sector, although specific details are not available. dbmreflex.com.tw was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | DBM Reflex id31210 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
DBM Technology Co., Ltd. is a leading brand in electroforming mold cores in Asia, established in 1999. With a team of over 70 professionals, the company specializes in mold core design and high-quality electroformed mold production, having produced more than 9,000 sets to date. Their services include feasibility assessments, optical design, mold core structure design, product testing, and light distribution testing, making them a preferred choice in the automotive industry. |
|||||
| Ransomware | Ultra Fame id31211 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
Ufame is a company based in Taiwan that operates in the manufacturing and engineering sector. The company provides various products and services related to its field of expertise. Ufame was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | Ultra Fame id31211 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
As PCB design continues to evolve in complexity and customization, we believe that outstanding circuit layouts are built on a strong engineering foundation and a deep understanding of our clients’ needs. From simple double-layer boards to advanced multi-layer high-speed signal boards, we approach every project with professionalism and deliver reliable, high-quality layouts our clients can count on. |
|||||
| Ransomware | Cardiology Associates id31212 View details | United States | Healthcare / Medicine | ||
|
Porthuronheartcenter.com is a healthcare organization based in the United States, providing medical services to patients. The center operates in the healthcare sector, offering various medical treatments and care. Porthuronheartcenter.com was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | Cardiology Associates id31212 View details | United States | Healthcare / Medicine | ||
|
Serving the community for over 45 years, Cardiology Associates of Port Huron, P.C. offers the latest in cardiac procedures and technology, helping our qualified physicians to detect and provide comprehensive treatment for a wide variety of adult heart and artery conditions. |
|||||
| Ransomware | Yost Home Improvements id31213 View details | United States | Construction / Real Estate | ||
|
Yost Home Improvements is a US-based company operating in the construction and real estate sector, providing home improvement services. The company is involved in various construction projects, offering services to clients in the United States. Yost Home Improvements is listed as a ransomware victim associated with Orova |
|||||
| Ransomware | Yost Home Improvements id31213 View details | United States | Construction / Real Estate | ||
|
Yost Home Improvements is a family-owned exterior remodeling and construction company based in Waterford, Connecticut, serving the southeastern CT region for over 50 years. They specialize in installing vinyl siding, windows, doors, gutters, roofing, and sunrooms. |
|||||
| Ransomware | KINGSSON id31214 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
Kingsson is a company based in Taiwan, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Kingsson was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | KINGSSON id31214 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
KINGSSON primarily operates as an OEM/ODM manufacturer, supplying customized security sealing products under customers' own brands. The company markets mainly to distributors and industrial customers rather than retail consumers. |
|||||
| Ransomware | SSI HOLDING (FAR EAST) LIMITED id31215 View details | Hong Kong | Other | ||
|
Ssife.com/index.php is a website based in Hong Kong, operating in the other sector, providing various offerings. The entity is located in Hong Kong and serves its purpose in the respective sector. Ssife.com/index.php was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | SSI HOLDING (FAR EAST) LIMITED id31215 View details | Hong Kong | Other | ||
|
AIMING at streamlining all aspects of business, procuring excellent quality of management and strengthening connexion of our well established affilated companies, S.S.I. Holding (Far East) Limited was found in November of 1995 with association of Simex Sport GmbH, a German base corporation of over 30 years experience in sport related business when inception. |
|||||
| Ransomware | Sanrio Hong Kong Co., Ltd id31216 View details | Hong Kong | Retail / E-commerce | ||
|
Sanrio Hong Kong, operating at www.sanrio.com.hk, is a retail and e-commerce company based in Hong Kong, offering a wide range of products, including character-based merchandise. The company is part of the global Sanrio brand, known for its beloved characters such as Hello Kitty. Sanrio Hong Kong was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | Sanrio Hong Kong Co., Ltd id31216 View details | Hong Kong | Retail / E-commerce | ||
|
Sanrio is the global lifestyle brand best known for Hello Kitty who was created in 1974, and home to many other beloved character brands such as My Melody, Kuromi, Little Twin Stars, Cinnamoroll, Pompompurin, gudetama, Aggretsuko, Chococat, Bad Badtz-Maru and Kerokerokeroppi. |
|||||
| Ransomware | Tat Fung Textile Co., Ltd. id31217 View details | Hong Kong | Manufacturing / Engineering | ||
|
Tatfung Tex is a company based in Hong Kong, operating in the manufacturing and engineering sector. The company likely provides textile manufacturing services, given its name and sector. Tatfung Tex was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | Tat Fung Textile Co., Ltd. id31217 View details | Hong Kong | Manufacturing / Engineering | ||
|
Tat Fung & Panther Denim is a premium woven, denim, and print fabric mill established in 1986. The company specializes in producing high-quality denim and print fabrics, focusing on sustainability and innovation. |
|||||
| Ransomware | Integrated Site Management id31218 View details | United States | Education | ||
|
ISM-SC operates in the education sector in the US, providing services to its constituents. As an educational institution, it likely offers various programs and resources to support student learning and development. ISM-SC was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | Integrated Site Management id31218 View details | United States | Education | ||
|
Integrated Site Management is a full service site consulting company with our foundation reinforced by developing partnerships with clients, vendors & suppliers. Partnerships built from professionalism, honesty, integrity, respect, and open communication. Integrated Site Management listens, researches, identifies, and then provides solutions for our clients needs. |
|||||
| Ransomware | Conceptual Designs, Inc. id31219 View details | United States | Construction / Real Estate | ||
|
Conceptual Designs Inc is a company based in the US, operating in the construction and real estate sector. The company provides various services related to construction and real estate development. Conceptual Designs Inc was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | Conceptual Designs, Inc. id31219 View details | United States | Construction / Real Estate | ||
|
Conceptual Designs, Inc. proudly provides interior design services for businesses across the Quad Cities from our studio in Bettendorf, Iowa. No matter what kind of business you own, we can help make your space match your company’s culture and values in a creative way. With over 35 years of experience, our team of designers can help bring your vision to life. |
|||||
| Ransomware | JK Capital Management Limited id31220 View details | Hong Kong | Finance / Legal / Insurance | ||
|
JK Capital Management is a financial services firm based in Hong Kong, operating in the finance, legal, and insurance sector. The company provides various financial solutions and services to its clients. JK Capital Management was listed as a ransomware victim associated with Orova. |
|||||
| Ransomware | JK Capital Management Limited id31220 View details | Hong Kong | Finance / Legal / Insurance | ||
|
JK Capital Management Limited is an asset management company set up in Hong Kong in 1997 and regulated by the Securities and Futures Commission of Hong Kong. We are GIPS and MIFID II compliant. Our mutual funds are all registered with CSSF, the Luxembourg regulator. |
|||||
| Ransomware | Global Friction Products, Inc id31221 View details | United States | Manufacturing / Engineering | ||
|
Global Friction Products is a US-based company operating in the manufacturing and engineering sector, providing products and services related to friction materials. The company is involved in the design, development, and production of friction-related products, serving various industries. Global Friction Products was listed as a ransomware victim associated with Orova |
|||||
| Ransomware | Global Friction Products, Inc id31221 View details | United States | Manufacturing / Engineering | ||
|
GLOBAL FRICTION PRODUCTS, INC is a company that manufactures, repairs, and /or re-arcs brake and clutch bands back to original drum for even wear on friction material. We specialize in the construction, mining, marine and offshore industries, i.e., cranes, draglines, clamshells, barges, dredges, ships, tugs, winches and more. |
|||||